Legal

Privacy Policy

Last updated: June 28, 2026

This Privacy Policy explains how StampSherpa (“StampSherpa,” “we,” “us,” or “our”) collects, uses, and shares information when you use our websites, applications, and services (the “Service”). By using the Service you agree to this Policy and to our Terms of Service. This Policy describes how we handle information about you, our customer. Information about the people you choose to mail (“Recipient Data”) is addressed in Section 5.

1. Information we collect

• Account information: your name, email, and authentication details (for example, when you sign in with Google).
• Website & brand information: the website URL you provide and content we retrieve and analyze from it (text, images, colors, logos, business details such as name, industry, location, and any phone number or address shown publicly).
• Content you create: postcards, copy, images, offers, campaigns, and settings you generate or edit in the Service.
• Recipient Data: names, mailing addresses, and related details you upload or that are generated for your campaigns. See Section 5.
• Payment information: processed by our payment processor. We do not collect or store full payment-card numbers; we receive limited details such as plan, status, and confirmation.
• Usage & device data: log data, IP address, device and browser information, and actions taken in the Service, collected automatically including via cookies and similar technologies.

2. How we use information

• provide, operate, maintain, secure, and improve the Service;
• analyze the website you submit and generate copy and imagery, including by sending your content to artificial-intelligence providers (Section 4);
• print, address, and mail your postcards through our print-and-mail vendors and the postal service;
• process payments, manage subscriptions, and prevent fraud and abuse (including rate-limiting);
• develop new features and improve our models, prompts, and templates, including using de-identified and aggregated data;
• communicate with you about your account, the Service, and support; and
• comply with law and enforce our agreements.

3. Legal bases

Where required, we process information to perform our contract with you, for our legitimate interests in operating and improving the Service and preventing abuse, with your consent where applicable, and to comply with legal obligations.

4. Artificial intelligence

The Service uses third-party AI providers to generate and edit copy and imagery. To do this, we send relevant content (such as your website text, brand details, and prompts) to those providers, who process it to return outputs to us. AI output may be inaccurate or unsuitable and should be reviewed before use, as described in our Terms.

5. Recipient Data (people you mail)

As between you and us, you are the controller of Recipient Data and StampSherpa processes it on your behalf as your service providerin order to print and mail your campaigns and to verify addresses. You are responsible for having a lawful basis to provide and mail to your recipients and for honoring opt-out and “do not mail” requests. If a recipient contacts us about their data, we will generally refer them to you as the responsible party. We do not use Recipient Data to send our own marketing.

6. How we share information

We do not sell your personal information. We share information only as follows:

• Service providers / subprocessors who help us run the Service, including: Google (Firebase, Cloud, and Gemini) for hosting, authentication, storage, and AI; Anthropic for AI; Firecrawl for website analysis; PostGrid and Click2Mail for print-and-mail; Stripe for payments; and the United States Postal Service for delivery. These providers process information under their own terms and only as needed to perform their services.
• Legal & safety: when we believe disclosure is necessary to comply with law or legal process, enforce our Terms, or protect the rights, safety, or property of StampSherpa, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.
• Aggregated / de-identified data, which is not personally identifying, for any purpose.

7. Data retention

We retain information for as long as your account is active and as long as needed to provide the Service, comply with our legal obligations, resolve disputes, prevent abuse, and enforce our agreements. We may retain de-identified and aggregated data indefinitely. We may delete or anonymize information at our discretion.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. Your choices & rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of certain personal information, or to object to or restrict certain processing. You can update much of your information in the Service, and you may contact us at support@stampsherpa.io to exercise applicable rights. We will respond as required by law and may need to verify your identity. California residents: we do not sell or “share” personal information as those terms are defined under California law. Requests about Recipient Data should be directed to the customer who controls it.

10. Cookies & analytics

We and our providers use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser settings; disabling them may affect functionality.

11. Children

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. International users

The Service is operated in the United States. If you access it from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other countries where we and our providers operate, which may have different data-protection laws than your country.

13. Changes to this Policy

We may update this Policy from time to time by posting the updated version with a new “Last updated” date. Changes are effective when posted. Your continued use of the Service after changes are posted constitutes acceptance.

14. Contact

The data controller for your account information is StampSherpa, 822 25th Ave S, Seattle, WA 98144. Questions about this Policy or your information? Contact us at support@stampsherpa.io.